Kerio Control Administrator’s Guide Kerio Technologies 2016 Kerio Technologies s.r.o. Contents Installing Kerio Control ....................................................... 18 Product editions ......................................................... 18 Installing Software Appliance edition ..................................... 18 Installing VMware Virtual Appliance ...................................... 19 Installing virtual appliance for Hyper-V ................................... 20 Configuring the Activation Wizard ............................................ 22 Configuring the Activation Wizard ........................................ 22 Step 1: Select a language .......................................... 22 Step 2: Setup connection .......................................... 22 Step 3: Set the time zone, date and time ........................... 22 Step 4: Activate Kerio Control ..................................... 22 Register Kerio Control trial version ........................ 23 Insert Kerio Control license number ....................... 24 Purchasing Kerio Control ................................. 26 Register offline with a licence key ......................... 26 Activate Kerio Control in unregistered mode . 27 Step 5: Help us make Kerio Control even better .................... 27 Step 6: Set the password for the administrator user account and sending alerts ................................................ 27 Setting administrator password ........................... 27 Sending default alerts ..................................... 28 Setting MyKerio cloud service ............................. 29 Configuration Assistant ....................................................... 30 Configuration Assistant overview ......................................... 30 Configure Internet connection and the local network . 31 Single Internet Link ....................................... 31 Two Internet links with load balancing .................... 32 Two Internet links with failover ........................... 33 General notes ............................................. 34 Define traffic policy ............................................... 34 Export your configuration ......................................... 36 Import configuration .............................................. 36 Register product .................................................. 37 3 Licensing and registering Kerio Control ....................................... 38 Deciding on the number of users (licenses) ............................... 38 Licenses, optional components, and Software Maintenance . 38 Registering Kerio Control in the administration interface . 38 Registering Kerio Control via the Internet ................................. 39 Importing the license key ......................................... 40 Transferring the license .................................................. 40 Using Dashboard in Kerio Control ............................................. 41 Dashboard overview ..................................................... 41 Configuring the Kerio Control web interface ................................... 42 Using HTTP for access to web interface ................................... 42 Using a specified hostname .............................................. 42 Changing a SSL certificate ................................................ 43 Configuring network interfaces ............................................... 44 Interfaces overview ...................................................... 44 Adding a new interface to the Interfaces section .......................... 44 Configuring interfaces ................................................... 45 Moving an interface to another group .............................. 45 Configuring Internet connectivity ......................................... 45 Adding tunnels .......................................................... 46 Configuring PPPoE mode in the Internet interface . 46 Configuring PPPoE tunnel ......................................... 46 Configuring PPTP tunnel .......................................... 47 Configuring L2TP tunnel .......................................... 47 VPN tunnel ....................................................... 48 Configuring Ethernet ports ............................................... 48 Box Edition ....................................................... 48 Appliance Editions ................................................ 48 Configuring L2TP tunnel ...................................................... 50 L2TP tunnel overview .................................................... 50 Prerequisities ............................................................ 50 Configuring L2TP tunnel ................................................. 50 Configuring L2TP tunnel with public IP address .................... 51 Configuring the guest network ................................................ 53 Guest network overview .................................................. 53 Assigning guest interfaces ............................................... 53 Setting DHCP scope ...................................................... 54 Customizing the welcome page ........................................... 54 Creating HTML content in your Welcome page ..................... 55 Setting shared password for guest users .................................. 55 4 Traffic rules for the guest network ....................................... 55 Configuring VLANs ........................................................... 57 VLAN support in Kerio Control ........................................... 57 Creating VLAN interfaces ................................................ 57 Removing VLAN interfaces ............................................... 57 Changing MAC addresses of network interfaces ............................... 59 Overview ................................................................ 59 Changing MAC addresses ................................................ 59 Configuring Kerio VPN Server ................................................. 61 VPN overview ............................................................ 61 Configuring Kerio VPN Server ............................................ 61 Configuring routing ...................................................... 62 Configuring DNS ......................................................... 63 Using the Kerio Control DNS server ................................ 63 Using external DNS servers ........................................ 64 Configuring Kerio Control VPN Clients .................................... 64 Assigning static IP addresses for Kerio Control VPN Clients . 65 Kerio Control VPN Client for administrators ................................... 66 Overview ................................................................ 66 System requirements .................................................... 66 Licensing Policy ......................................................... 66 Connecting to Kerio VPN Server .......................................... 66 Troubleshooting SSL certificates .......................................... 67 Kerio Control VPN Client logs ............................................ 67 Assigning static IP addresses for Kerio Control VPN Clients ................... 69 Overview ................................................................ 69 Configuring Kerio VPN tunnel ................................................. 71 Kerio VPN overview ...................................................... 71 Configuring the Kerio VPN tunnel ........................................ 71 Configuring routing ...................................................... 72 Configuring VPN failover ................................................. 72 Examples of Kerio VPN tunnel configuration .............................. 73 Example 1 - Company with one branch office ....................... 73 Example of Kerio VPN configuration: company with two filial offices . 77 Overview ................................................................ 77 5 Configuring IPsec VPN ........................................................ 87 IPsec overview ........................................................... 87 Configuring IPsec VPN server with a preshared key ........................ 87 Configuring IPsec server with a SSL certificate ............................. 89 Configuring clients with a preshared key ................................. 89 Supported mobile devices ................................................ 89 Configuring IPsec VPN tunnel ................................................. 91 IPsec overview ........................................................... 91 Before you start ......................................................... 91 Configuring IPsec VPN tunnel with a preshared key authentication . 91 Configuring IPsec VPN tunnel with a SSL certificate authentication . 92 Configuring local networks ............................................... 93 Configuring VPN failover ................................................. 95 Configuring IPsec VPN tunnel (Kerio Control and another device) . 96 IPsec tunnel overview .................................................... 96 Default values in Kerio Control ........................................... 96 Supported ciphers ....................................................... 97 Configuring traffic rules ....................................................... 99 How traffic rules work ................................................... 99 Configuring traffic rules .................................................. 99 Generic